Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: kX9iGaSpGPcV3SZo8dKGHVXfOz53hl1wtAPuWdL17XQ=
Subject key identifier: 4B:6D:F6:47:A7:52:75:27:13:60:5D:4C:23:A2:A0:7E:9E:94:AB:6B
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 01A18450C332E9BC7E8CBE681ED09F5AD70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 14BA
Signing time: Wed 28 Oct 2026 21:00:47 +0000
Manifest this update: Wed 28 Oct 2026 21:00:47 +0000
Manifest next update: Thu 29 Oct 2026 21:00:47 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: 1VgH1+maGtPYXySIvqRXFX0l3jCz4cbUQ9ubaKFNSmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:c3:32:e9:bc:7e:8c:be:68:1e:d0:9f:5a:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Oct 28 21:00:47 2026 GMT
Not After : Oct 29 21:00:47 2026 GMT
Subject: CN=4b6df647a752752713605d4c23a2a07e9e94ab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:46:a1:9c:3f:d1:6e:7f:69:3c:f1:ae:14:
84:e9:07:09:8d:6b:1b:bf:db:12:68:d4:bb:d1:14:
a0:59:87:af:4c:b2:81:f6:24:c6:15:8d:55:39:b3:
ca:b1:82:d9:13:6c:f0:35:0b:37:41:47:12:6e:b3:
01:9b:d2:20:64:a9:d0:13:d4:0c:9f:7e:55:fb:73:
75:74:c7:b6:ae:5b:24:9c:1a:7a:83:ef:8e:90:39:
0e:d0:78:03:61:3b:6a:01:ba:33:f4:38:36:16:e0:
d9:b7:7b:6a:4a:aa:83:42:35:0f:11:78:df:e8:22:
af:e0:40:16:8f:40:a7:17:d7:82:88:24:fb:f3:d7:
9b:1c:11:06:9e:4d:30:49:d9:09:12:ff:f1:1b:d4:
e1:88:2d:56:f2:d3:b7:1f:bb:a2:d0:48:64:58:66:
2d:fb:7a:52:ea:a9:26:ab:b0:d7:88:1c:6d:47:0b:
e9:26:30:f5:67:9a:36:d7:5f:74:e5:3a:2c:75:ea:
48:f5:0a:f0:2e:e7:52:9f:f0:48:73:30:2b:c7:58:
0c:c7:57:db:d7:65:c7:3c:89:59:48:d4:24:05:58:
eb:07:23:cb:e6:a6:b8:a0:e4:26:f5:eb:58:b5:4d:
6a:77:fc:74:5d:30:92:0b:80:50:35:89:f1:98:48:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:F6:47:A7:52:75:27:13:60:5D:4C:23:A2:A0:7E:9E:94:AB:6B
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cf:fa:69:50:57:9d:ee:89:8c:c7:7c:ff:23:a3:60:58:34:
3a:36:53:f8:24:23:67:ac:38:bf:4f:84:da:6d:8b:2b:cd:b4:
21:38:4e:f0:1b:28:43:77:70:38:a3:83:40:bd:96:e8:8a:a2:
4b:48:15:c7:de:bc:81:70:2b:b7:bb:be:4f:bb:64:2e:b9:ca:
91:bc:e1:ca:e3:36:da:56:5c:8a:39:82:11:87:e7:f5:10:f5:
d4:1c:7c:8c:c6:a5:53:99:7b:2c:92:28:5a:68:f0:e0:51:27:
72:ff:62:7f:82:b0:d6:ab:31:d6:8b:b1:3a:cb:aa:a3:02:19:
c9:13:cb:ff:8f:79:73:4b:91:e2:22:10:8d:fa:0c:87:17:0f:
8f:ba:6a:e9:7b:f4:ff:a5:4e:f3:4a:44:cf:a9:6c:77:a0:d1:
7d:fb:49:18:60:b7:7c:a4:fb:51:9b:c0:e4:f5:64:7c:ce:82:
67:78:cb:17:be:a1:56:d3:78:09:a5:c7:63:22:ba:36:e5:ca:
dd:74:1b:52:5d:e8:c7:33:51:c3:92:48:d9:d1:f6:49:e5:46:
76:4d:2a:bf:bb:38:aa:26:87:a2:78:b3:1d:2e:29:2a:7e:4c:
99:4c:34:2a:85:4b:ea:03:df:b1:43:3f:7d:2e:d4:8e:5b:31:
10:d0:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:15:36 2026 by rpki-client